Which of the following is an example of a corrective control?

• A.Diverting incoming traffic upon responding to the denial of service (DoS) attack
• B.Filtering network traffic before entering an internal network from outside
• C.Examining inbound network traffic for viruses
• D.Logging inbound network traffic

Comment: *

Name: *

Email: *

Verification: *

In assessing risk, it is MOST essential to:

• A.provide equal coverage for all asset types.
• B.use benchmarking data from similar organizations.
• C.consider both monetary value and likelihood of loss.
• D.focus primarily on threats and recent business losses.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST appropriate method for deploying operating system (OS) patches to production application servers?

• A.Batch patches into frequent server updates
• B.Initially load the patches on a test machine
• C.Set up servers to automatically download patches
• D.Automatically push all patches to the servers

Comment: *

Name: *

Email: *

Verification: *

Senior management commitment and support for information security can BEST be obtained through presentations that:

• A.use illustrative examples of successful attacks.
• B.explain the technical risks to the organization.
• C.evaluate the organization against best security practices.
• D.tie security risks to key business objectives.

Comment: *

Name: *

Email: *

Verification: *

When granting a vendor remote access to a system, which of the following is the MOST important consideration?

• A.Hard drive encryption
• B.Session monitoring
• C.Multi- factor authentication
• D.Password hashing

Comment: *

Name: *

Email: *

Verification: *